sec-audit-static
CommunityAutomates static security audits with JSON outputs.
Authorwindshock
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Static code security auditing is tedious and error-prone when done manually; this Skill automates SAST/SCA and secret detection to produce consistent, machine-readable outputs.
Core Features & Use Cases
- Orchestrates static analysis, dependency checks, and secret scanning across repositories.
- Generates standardized JSON findings and final reports that align with the existing schemas.
- Use case: run on a multi-repo codebase to produce a unified security snapshot and enable risk-based triage.
Quick Start
Install the skill and run the local workflow to generate final_report.json for your codebase.
Dependency Matrix
Required Modules
semgrepjoernrgzoekt
Components
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: sec-audit-static Download link: https://github.com/windshock/oh-my-secuaudit/archive/main.zip#sec-audit-static Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.